Finding safety errors with ACO